Plain-language summary first
Privacy notice
We collect what is needed to enrol you, invoice you and issue certificates. We do not sell personal data and this website sets no advertising or analytics cookies.
Who is responsible for your data
The data controller is our operating company, which sells and invoices IATACF courses. Contact: [email protected].
What we collect
- When you request a confirmation link: your name, email address, billing country, optional organisation, and the courses you chose.
- When you confirm an order: the version of the terms you accepted, the time, and the network details your browser sends (IP address, browser identification and the approximate country, city and network provider derived from the IP address). This is our record that you accepted the terms.
- When you study: assessment submissions and results, so that certificates can be issued and verified.
Your enrolment list before checkout is stored only in your own browser.
Why we use it
To make and invoice the enrolment (performing the contract), to keep accounting records (legal obligation), to issue and verify certificates (performing the contract and, for verification, our legitimate interest in preventing fraud), and to answer your questions.
Who processes it for us
- Cloudflare, which hosts the website and the order database.
- Resend, which delivers the confirmation and invoice emails.
Both act on our instructions. Data may be processed outside your country under standard contractual safeguards.
How long we keep it
Orders and invoices: as long as accounting law requires, currently seven years. Certificate records: for as long as the certificate can be verified. Unconfirmed requests: deleted after 90 days.
Your rights
You may ask for a copy of your data, its correction or deletion, or object to its use, by writing to [email protected]. You may also complain to your data protection authority.